Analysis

  • max time kernel
    306242s
  • max time network
    41s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    02-02-2023 13:43

General

  • Target

    b8df48a3629ad88eec01b9a13f68645c4e3629b7.apk

  • Size

    3.3MB

  • MD5

    f0cce07d608a1d2d12532f64f301e48b

  • SHA1

    b8df48a3629ad88eec01b9a13f68645c4e3629b7

  • SHA256

    8824e6533b703fe8729fe526621de3e5305065acfba549cbae333278b1dca12b

  • SHA512

    415a1af509867ce3579852eada90e46fc0d7971a9db0086d38e7545544f92520f903e4548dfcb21b542df54862508db5da08782445acac7f460cf95a3d015a64

  • SSDEEP

    98304:V/gCUMzepPmSOomo8IWROuJqUoag/cvKancVtTNWUv:6pPmSVKqUS

Score
1/10

Malware Config

Signatures

Processes

  • com.feike.jupiterapps.stopwatch
    1⤵
      PID:4082
      • /system/bin/sh -c getprop ro.board.platform
        2⤵
          PID:4208
        • getprop ro.board.platform
          2⤵
            PID:4208
          • /system/bin/sh -c type su
            2⤵
              PID:4241
            • logcat -d -v threadtime
              2⤵
                PID:4270
              • logcat -d -v threadtime
                2⤵
                  PID:4284
                • /system/bin/sh -c getprop ro.miui.ui.version.name
                  2⤵
                    PID:4372
                  • getprop ro.miui.ui.version.name
                    2⤵
                      PID:4372
                    • /system/bin/sh -c getprop ro.build.version.emui
                      2⤵
                        PID:4461
                      • getprop ro.build.version.emui
                        2⤵
                          PID:4461
                        • /system/bin/sh -c getprop ro.lenovo.series
                          2⤵
                            PID:4531
                          • getprop ro.lenovo.series
                            2⤵
                              PID:4531
                            • /system/bin/sh -c getprop ro.build.nubia.rom.name
                              2⤵
                                PID:4567
                              • getprop ro.build.nubia.rom.name
                                2⤵
                                  PID:4567
                                • /system/bin/sh -c getprop ro.meizu.product.model
                                  2⤵
                                    PID:4591
                                  • getprop ro.meizu.product.model
                                    2⤵
                                      PID:4591
                                    • /system/bin/sh -c getprop ro.build.version.opporom
                                      2⤵
                                        PID:4653
                                      • getprop ro.build.version.opporom
                                        2⤵
                                          PID:4653
                                        • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                          2⤵
                                            PID:4704
                                          • getprop ro.vivo.os.build.display.id
                                            2⤵
                                              PID:4704
                                            • /system/bin/sh -c getprop ro.aa.romver
                                              2⤵
                                                PID:4730
                                              • getprop ro.aa.romver
                                                2⤵
                                                  PID:4730
                                                • /system/bin/sh -c getprop ro.lewa.version
                                                  2⤵
                                                    PID:4756
                                                  • getprop ro.lewa.version
                                                    2⤵
                                                      PID:4756
                                                    • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                      2⤵
                                                        PID:4782
                                                      • getprop ro.gn.gnromvernumber
                                                        2⤵
                                                          PID:4782
                                                        • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                          2⤵
                                                            PID:4807
                                                          • getprop ro.build.tyd.kbstyle_version
                                                            2⤵
                                                              PID:4807
                                                            • /system/bin/sh -c getprop ro.build.fingerprint
                                                              2⤵
                                                                PID:4832
                                                              • getprop ro.build.fingerprint
                                                                2⤵
                                                                  PID:4832
                                                                • /system/bin/sh -c getprop ro.build.rom.id
                                                                  2⤵
                                                                    PID:4860
                                                                  • getprop ro.build.rom.id
                                                                    2⤵
                                                                      PID:4860

                                                                  Network

                                                                  MITRE ATT&CK Matrix

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu
                                                                    Filesize

                                                                    4KB

                                                                    MD5

                                                                    f2b4b0190b9f384ca885f0c8c9b14700

                                                                    SHA1

                                                                    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                    SHA256

                                                                    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                    SHA512

                                                                    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu-journal
                                                                    Filesize

                                                                    524B

                                                                    MD5

                                                                    2f3df8bf3683aba9a4dd23d5bce421e2

                                                                    SHA1

                                                                    5d5b633e5be27d3e93862039605efa9a41cd8d03

                                                                    SHA256

                                                                    827cf32cd3aae579b8a07b95bd6de8997c0bb0a0a06b6dfb6e8f89e42c42977b

                                                                    SHA512

                                                                    36444de733fa1a1d8e59f40c1fc1cc6ee781c16e18de4d84c00a498f6916077c8fb08c68dbae3dc48451b53829b4d8ea1f717d70de63b402c29795dbdbe831a2

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu-shm
                                                                    Filesize

                                                                    8B

                                                                    MD5

                                                                    7dea362b3fac8e00956a4952a3d4f474

                                                                    SHA1

                                                                    05fe405753166f125559e7c9ac558654f107c7e9

                                                                    SHA256

                                                                    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                                                                    SHA512

                                                                    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu-wal
                                                                    Filesize

                                                                    273KB

                                                                    MD5

                                                                    6906f38100139d118a956f0a545beb7e

                                                                    SHA1

                                                                    26263a89e93d24eb6a89804a9d3b06a022c57c4b

                                                                    SHA256

                                                                    fe29650dde5f2e2f20a887defe93c4c6392d08519f64e8a458de86a570d5846d

                                                                    SHA512

                                                                    7707352140f8a863c42ccce83f488bf0b780195f15c39e274de4546616fedd7327a2017c49173c917ff053e51b3d2eb2fb539d0a5c9411a4998b6865df5c92a0

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/shared_prefs/bugly_data.xml
                                                                    Filesize

                                                                    114B

                                                                    MD5

                                                                    2a9bfaae5ec6981cc547d639451c9f41

                                                                    SHA1

                                                                    20a39e5b8f759955f378a4351a24ec5e93bee806

                                                                    SHA256

                                                                    f41a6e8a9b388eaebff716d1689e821590df1380f09c92a7745f864c90111597

                                                                    SHA512

                                                                    67aa67daf7232c36feafb64a4fec58e8089a451e5469fb9ed4766651bb55f7556ea18bde3223dfb746c20825fa8ef5965d77789e7741970fcfc3cbe4b90a6faa

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/shared_prefs/bugly_data.xml
                                                                    Filesize

                                                                    162B

                                                                    MD5

                                                                    4f3d43f634585bd165941cc8891ac285

                                                                    SHA1

                                                                    b4ee92402c40010e96828f363201f90265770d13

                                                                    SHA256

                                                                    f3dba2ed6d716f1dd634333004d15aacc04a369cc50e335dadbff5b6dca05a34

                                                                    SHA512

                                                                    d53c9201f292d8d93724fde6320307784d9d773c0cea2db333e94d68734e83621772146d26deed965b2bd21def212ce2724fd95d86fb1b06492622e630484d48